ssteele / wp-typesanity
在WordPress中使用时通过类型清理输入
1.0.2
2018-03-25 00:00 UTC
Requires (Dev)
- 10up/wp_mock: 0.3.*
- phpunit/phpunit: 6.*
This package is not auto-updated.
Last update: 2024-09-29 05:48:26 UTC
README
一个通过单元类型清理用户输入的WordPress插件
描述
WP Typesanity在处理WordPress环境中的各种基础PHP单元类型时提供了一致的用户体验。所有输入都被转换为字符串并通过wp_kses过滤以去除标记和“恶意脚本”。你可以传递第二个参数给sanitize来指定预期的单元类型。字符串、整数和浮点数会被验证,并保留预期数据。意外数据将被设置为空字符串。现在你可以放心地快速开发,因为你所处理的单元类型正是你所期望的。下面是单元类型预期的详细表格
设置
通过终端导航到你的插件并执行
composer require ssteele/wp-typesanity
文档
清理用户输入
$translator = new UserInput();
$_POST = [
'name' => 'Steve Steele',
'id' => 1,
'gpa' => 3.9,
];
$name = $translator->sanitize($_POST['name']); // sanitize name
传入可选参数[s]tring,[i]nteger,或[f]loat来确保正确的数据类型
$name = $translator->sanitize($_POST['name'], 's'); // sanitize name as string
$id = $translator->sanitize($_POST['id'], 'i'); // sanitize id as integer
$gpa = $translator->sanitize($_POST['gpa'], 'f'); // sanitize gpa as float
批量清理用户输入数组
$post = $translator->sanitize($_POST); // sanitize all post elements
$post = $translator->sanitize($_POST, 'i'); // sanitize all post elements as integer
$post = $translator->sanitize($_POST, ['s', 'i', 'f']); // sanitize all post elements (of known order) against respective types